本文關(guān)鍵詞： 云服務(wù) 訪問(wèn)控制 業(yè)務(wù)流程 RESTful 安全　出處：《華南理工大學(xué)》2014年碩士論文　論文類型：學(xué)位論文

【摘要】：當(dāng)前IT市場(chǎng)的云計(jì)算、移動(dòng)應(yīng)用、web應(yīng)用都在不斷發(fā)展，而三者之間的結(jié)合卻處于初級(jí)階段。如何通過(guò)云計(jì)算模式，實(shí)現(xiàn)這三者更好的結(jié)合？這里面包含幾個(gè)方面的問(wèn)題：提供什么樣的云服務(wù)？怎樣設(shè)計(jì)云服務(wù)？如何簡(jiǎn)單、安全地獲取所需服務(wù)？本文以企業(yè)應(yīng)用、非企業(yè)應(yīng)用兩類應(yīng)用開發(fā)者的實(shí)際需求和學(xué)術(shù)研究為出發(fā)點(diǎn)，深入的分析和研究了以上幾個(gè)問(wèn)題。 提供什么樣的云服務(wù)？從大的分類來(lái)說(shuō)，云服務(wù)包括3種：IaaS、PaaS、SaaS，分別強(qiáng)調(diào)給使用者直接提供硬件、應(yīng)用開發(fā)系統(tǒng)、應(yīng)用軟件三個(gè)不同級(jí)別的服務(wù)，本論文意在研究云計(jì)算、移動(dòng)應(yīng)用、web應(yīng)用之間的結(jié)合問(wèn)題，選擇云模式的應(yīng)用開發(fā)系統(tǒng)（PaaS）、應(yīng)用軟件（SaaS），作為突破口。根據(jù)實(shí)際需求，實(shí)現(xiàn)了一個(gè)信息系統(tǒng)云服務(wù)平臺(tái)：提供組織管理服務(wù)；提供云存儲(chǔ)服務(wù)，包括靈活的無(wú)模式結(jié)構(gòu)化數(shù)據(jù)存儲(chǔ)，以及文件存儲(chǔ)；提供企業(yè)信息建設(shè)應(yīng)用廣泛的業(yè)務(wù)流程管理系統(tǒng)。 怎樣設(shè)計(jì)云服務(wù)？本系統(tǒng)在數(shù)據(jù)層采用開源云計(jì)算平臺(tái)MongoDB，支撐平臺(tái)上層邏輯,對(duì)于多租戶模式，選擇“共享數(shù)據(jù)庫(kù)，共享數(shù)據(jù)架構(gòu)”的方案下，使用租戶欄位實(shí)現(xiàn)租戶數(shù)據(jù)隔離；針對(duì)基于云平臺(tái)開發(fā)的應(yīng)用的最終用戶，分別設(shè)計(jì)了結(jié)構(gòu)化數(shù)據(jù)資源、文件資源的二級(jí)訪問(wèn)控制模型；采用GWT實(shí)現(xiàn)web版平臺(tái)后端管理系統(tǒng)；集成開源工作流引擎activiti，業(yè)務(wù)流程管理系統(tǒng)云服務(wù)化，使平臺(tái)租戶能夠輕松實(shí)現(xiàn)業(yè)務(wù)流程應(yīng)用。 如何簡(jiǎn)單、安全地獲取所需服務(wù)？本文分兩個(gè)方面介紹這個(gè)問(wèn)題的解決方案：如何簡(jiǎn)單地獲取服務(wù)？采用開放接口的形式，對(duì)外提供RESTful API，，本文創(chuàng)造性的設(shè)計(jì)了具有強(qiáng)表達(dá)力的接口設(shè)計(jì)模式，能夠方便的獲取所需的服務(wù)資源；如何保障傳輸?shù)陌踩�？針�?duì)REST本身的安全機(jī)制不夠完善，容易被重放攻擊，本文結(jié)合REST的特點(diǎn)，為RESTfulAPI提出能夠完全避免重放攻擊、確保信息完整性、機(jī)密性的安全服務(wù)模型。 在應(yīng)用實(shí)例方面，以該平臺(tái)租戶的身份，租用平臺(tái)功能，實(shí)現(xiàn)了一個(gè)帶工作流功能的企業(yè)內(nèi)部通信工具。該用例表明本文設(shè)計(jì)的信息系統(tǒng)云服務(wù)平臺(tái)有著良好的可用性。 最后，對(duì)該服務(wù)平臺(tái)有待繼續(xù)深入探討和實(shí)踐的研究方向進(jìn)行展望。
[Abstract]:The current IT market cloud computing, mobile applications and web applications are constantly developing, but the integration of the three is in the initial stage. How to achieve a better combination of these three through the cloud computing model? There are several aspects to this question: what kind of cloud services do you offer? How to design cloud services? How can I simply and safely obtain the required services? Based on the actual needs and academic research of two kinds of application developers, enterprise application and non-enterprise application, this paper analyzes and studies the above problems. What kind of cloud services are available? From the big classification, the cloud service includes three kinds of different levels of service, such as providing hardware, application development system and application software directly to the user. This paper aims to study cloud computing, and the purpose of this paper is to study cloud computing. Based on the integration of mobile applications and web applications, the application development system based on cloud pattern, Paa Sine, and the application software, Saa Sine, are selected as the breakthrough points. According to the actual requirements, a cloud service platform of information system is implemented: to provide organization and management service; Provide cloud storage services, including flexible schema-less structured data storage, as well as file storage; provide enterprise information construction and widely used business process management system. How to design cloud services? This system adopts the open source cloud computing platform MongoDB in the data layer, supports the upper layer logic of the platform, for the multi-tenant mode, chooses the "shared database, shared data structure" scheme, uses the tenant field to realize the tenant data isolation; For the end-users of the application based on cloud platform, the two-level access control model of structured data resources and file resources is designed, and the back-end management system of web platform is implemented by GWT. With the integration of open source workflow engine activitiand cloud service of business process management system, platform tenants can easily implement business process application. How can I simply and safely obtain the required services? This article introduces the solution to this problem in two aspects: how to simply access services? Using the form of open interface to provide RESTful API, this paper creatively designs an interface design pattern with strong expressiveness, which can easily obtain the required service resources; how to ensure the security of transmission? In view of the imperfect security mechanism of REST itself, it is easy to be attacked by replay. Combined with the characteristics of REST, this paper proposes a security service model for RESTfulAPI, which can completely avoid replay attacks and ensure the integrity and confidentiality of information. In the application example, as the tenant of the platform and the function of renting the platform, a communication tool within the enterprise with workflow function is implemented. The use case shows that the cloud service platform designed in this paper has good usability. Finally, the research direction of the service platform needs to be further discussed and practiced.
【學(xué)位授予單位】：華南理工大學(xué)
【學(xué)位級(jí)別】：碩士
【學(xué)位授予年份】：2014
【分類號(hào)】：TP393.09

【參考文獻(xiàn)】

相關(guān)期刊論文 前3條

1 譚毓安,王佐,曹元大;RSA數(shù)字簽名算法在軟件加密中的應(yīng)用[J];計(jì)算機(jī)系統(tǒng)應(yīng)用;2004年08期

2 馮新?lián)P;沈建京;;REST和RPC:兩種Web服務(wù)架構(gòu)風(fēng)格比較分析[J];小型微型計(jì)算機(jī)系統(tǒng);2010年07期

3 羅新;;基于Workflow技術(shù)的在線題庫(kù)的設(shè)計(jì)[J];現(xiàn)代計(jì)算機(jī)(專業(yè)版);2013年02期

本文編號(hào)：1530540